feat: Default User Credentials

[Seokyun-Ha]

Define and inject default user credential on value.yaml directly.

It generate K8s Secret, and mount it into datahub-frontend Pod using VolumeMount.

#322

Checklist

• The PR conforms to DataHub's Contributing Guideline (particularly Commit Message Format)
• Links to related issues (if applicable)
• Tests for the changes have been added/updated (if applicable)
• Docs related to the changes have been added/updated (if applicable)

Features

Random Admin Password

Generate a 32-character admin user password.

  defaultUserCredentials:
    randomAdminPassword: true

Multiple Initial Users

Also tested initial admin user, and initial normal users, and checked work well.

  defaultUserCredentials:
    randomAdminPassword: false
    # You can also set specific passwords for default users
    manualValues: |
      datahub:manualPassword
      initialViewer:manualPassword

[david-leifker]

It might be better to leave the defaultUserCredentials empty and generate a random password by default on initial install. This way we can avoid the issue of even having a set of default credentials at install. What do you think?

[Seokyun-Ha]

Random password generation also great, but I think it should be possible for the deployer to set the password of the initial user.

Also, I think defaultUserCredentials prop should be non-empty. Because "datahub", the datahub's initial password is so simple, and widely known, so if deployer fotgot setting or changing the initial password, any attackers can access the frontend as the initial Admin user.

[Seokyun-Ha]

For a random password, it can be good to add a password random generation option 👍

[Seokyun-Ha]

Hello, @david-leifker, I added randomAdminPassword option to generate random 32 length password! It's a default option, but if deployer want to set user.props file manually, he can use manualValue option instead.

[david-leifker]

Thank you!